Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
File:                     323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (raw, json)
Hash identifier:          XxLHlLMNtxjDnoOPvwM0KTredpkC9383n34NZKNYKow=
Subject key identifier:   E6:43:78:ED:37:A7:CD:05:D1:BE:8D:D5:11:ED:19:83:8B:11:76:5A
Certificate issuer:       /CN=EB2C362543491CC1147C06C78106957C5F504A23
Certificate serial:       13E1FA4512C89BCE23ACB1CFE1EF05C5EE91705C
Authority key identifier: EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
Signing time:             Wed 03 Apr 2024 18:39:08 +0000
ROA not before:           Wed 03 Apr 2024 18:34:08 +0000
ROA not after:            Wed 02 Apr 2025 18:39:08 +0000
asID:                     270632
IP address blocks:        2804:6f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl
                          rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e1:fa:45:12:c8:9b:ce:23:ac:b1:cf:e1:ef:05:c5:ee:91:70:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2C362543491CC1147C06C78106957C5F504A23
        Validity
            Not Before: Apr  3 18:34:08 2024 GMT
            Not After : Apr  2 18:39:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ec:35:3b:7a:22:64:cb:cd:e9:2a:5f:3d:ed:
                    df:37:9a:bf:34:28:09:55:9f:7d:9d:bd:cd:92:05:
                    bf:27:64:f5:14:b1:f4:10:56:d4:da:fe:ce:bf:d0:
                    96:86:48:63:eb:b1:26:dd:bf:3d:91:d2:68:85:82:
                    5c:b4:a9:d5:38:08:41:ed:b3:27:53:2e:a3:46:55:
                    29:a6:f4:a0:21:81:ab:bb:11:64:43:ba:75:ce:72:
                    80:af:a8:71:06:e3:36:14:73:e5:4a:70:3e:86:41:
                    c6:69:67:74:e5:d2:aa:81:08:4c:c9:84:e8:18:a9:
                    df:9c:46:41:2c:e5:02:5e:52:59:d6:92:bd:4c:88:
                    37:ca:29:4e:08:3f:59:3b:26:e1:d8:7e:02:f5:ac:
                    74:7b:30:b8:72:4f:9e:b3:b8:f2:65:f2:de:ac:51:
                    00:75:bd:23:6c:4d:48:93:b8:c1:26:ff:17:2e:62:
                    f2:96:8a:08:d1:3f:ec:a6:fe:8f:e2:3a:f9:d4:da:
                    1c:f6:2a:b4:87:d1:e6:75:51:3e:bf:df:16:4a:54:
                    63:dc:9a:f6:19:b0:44:25:2c:bd:a9:0e:a7:b4:32:
                    53:70:b7:ae:03:ac:71:79:d2:d1:33:08:3e:47:2b:
                    6e:cb:76:da:58:de:bc:01:63:39:21:28:b7:96:c4:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:78:ED:37:A7:CD:05:D1:BE:8D:D5:11:ED:19:83:8B:11:76:5A
            X509v3 Authority Key Identifier:
                keyid:EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:67:fa:53:71:16:e9:6f:eb:6f:0e:35:dc:f7:e6:e1:54:
         e0:1f:bd:d7:44:31:ed:8a:30:12:73:8e:c2:9c:7b:77:f1:97:
         f0:bf:45:b7:76:58:a9:75:90:d2:da:81:25:15:53:5a:c0:a1:
         dc:8a:33:ef:52:7d:bd:a8:4f:11:a7:f7:c9:e4:19:99:9c:4c:
         d1:d2:f7:5b:2b:a0:b8:85:c4:db:3f:78:81:ce:a0:37:71:56:
         80:c6:6f:23:b0:03:a4:12:75:95:00:58:41:4d:ae:a4:df:38:
         2d:1f:da:f7:e8:19:db:44:2c:ff:f9:8f:e7:88:09:ab:72:86:
         c8:83:0a:fb:d1:bb:f8:d5:25:76:42:b4:df:fa:14:57:2b:1f:
         37:1c:8a:5d:94:00:4f:98:76:ca:74:d2:28:72:a5:5d:e5:c5:
         89:d1:bc:9b:a7:b8:de:ec:c5:9a:71:f9:b0:d5:0d:e0:b4:a5:
         a9:1e:a7:54:53:9c:8a:20:50:8e:ad:9a:dd:6b:6e:08:06:b1:
         44:46:57:59:c8:95:aa:1f:5c:4c:af:31:fd:24:23:3d:95:05:
         27:ab:32:81:54:16:af:71:02:de:85:cd:59:bf:69:be:57:61:
         3b:76:c9:20:61:7e:f1:34:b7:3d:65:e2:fc:2f:3c:02:77:3d:
         27:ca:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:40 2024 by rpki-client on console-fra.rpki-client.org